jimmy/mold_cost_online_tool
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update the API Gateway Resource Policy

Browse Source
This commit is contained in:
Anup Raj Gopinathan
2025-06-25 15:03:42 +02:00
parent 57b6d5eb75
commit ffff5c0869
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infra/bin/apiStack.ts
+11 -1
View File
@@ -93,12 +93,22 @@ export class MccAPIInfraStack extends Stack {
effect: Effect.ALLOW, effect: Effect.ALLOW,
principals: [new AnyPrincipal()], principals: [new AnyPrincipal()],
actions: ['execute-api:Invoke'], actions: ['execute-api:Invoke'],
resources: ['execute-api:/*'], resources: ['execute-api:/*/*/*'],
// Optionally, restrict by source VPC or VPC endpoint // Optionally, restrict by source VPC or VPC endpoint
conditions: { conditions: {
StringEquals: { 'aws:SourceVpce': executeApiVpcEndpoint.vpcEndpointId } StringEquals: { 'aws:SourceVpce': executeApiVpcEndpoint.vpcEndpointId }
} }
}), }),
new PolicyStatement({
effect: Effect.DENY,
principals: [new AnyPrincipal()],
actions: ['execute-api:Invoke'],
resources: ['execute-api:/*/*/*'],
// Optionally, restrict by source VPC or VPC endpoint
conditions: {
StringNotEquals: { 'aws:SourceVpce': executeApiVpcEndpoint.vpcEndpointId }
}
}),
], ],
}), }),
}); });